Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/672fdd-cc7c-4449-9f55-023995906c46/1/XlBVlpbJeiw_jhqZj_uICx5rw4E.roa
File: XlBVlpbJeiw_jhqZj_uICx5rw4E.roa (raw, json)
Hash identifier: b57LRw12FIS7FItWj+oy1C5QtRpy58oaAcaEjsJGepw=
Subject key identifier: 5E:50:55:96:96:C9:7A:2C:3F:8E:1A:99:8F:FB:88:0B:1E:6B:C3:81
Certificate issuer: /CN=60bff94704e4a475374e170cbe17365fa89fe07b
Certificate serial: 019EB677E6A79DBDFC75B72203DE38E46E50
Authority key identifier: 60:BF:F9:47:04:E4:A4:75:37:4E:17:0C:BE:17:36:5F:A8:9F:E0:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YL_5RwTkpHU3ThcMvhc2X6if4Hs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/672fdd-cc7c-4449-9f55-023995906c46/1/XlBVlpbJeiw_jhqZj_uICx5rw4E.roa
Signing time: Thu 11 Jun 2026 11:36:11 +0000
ROA not before: Thu 11 Jun 2026 11:36:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212116
IP address blocks: 79.108.232.0/24 maxlen: 24
79.108.233.0/24 maxlen: 24
79.108.234.0/23 maxlen: 23
79.108.236.0/24 maxlen: 24
79.108.237.0/24 maxlen: 24
79.108.238.0/23 maxlen: 23
185.225.126.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/672fdd-cc7c-4449-9f55-023995906c46/1/YL_5RwTkpHU3ThcMvhc2X6if4Hs.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/672fdd-cc7c-4449-9f55-023995906c46/1/YL_5RwTkpHU3ThcMvhc2X6if4Hs.mft
rsync://rpki.ripe.net/repository/DEFAULT/YL_5RwTkpHU3ThcMvhc2X6if4Hs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 17:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b6:77:e6:a7:9d:bd:fc:75:b7:22:03:de:38:e4:6e:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60bff94704e4a475374e170cbe17365fa89fe07b
Validity
Not Before: Jun 11 11:36:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5e50559696c97a2c3f8e1a998ffb880b1e6bc381
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:6a:4f:c8:9b:58:b4:34:f9:a0:bf:56:40:6e:
47:21:6e:8a:e7:09:19:c0:45:70:1d:41:a5:d0:0b:
36:48:69:4a:20:fa:36:2e:cb:ee:51:43:e4:b3:c8:
b3:96:bc:9c:b2:7c:d6:8f:e8:cf:a5:10:53:de:dd:
fb:8c:45:68:da:7b:cc:6e:17:90:67:f4:27:fc:74:
f3:8d:57:68:a0:53:0d:0c:e3:9d:88:59:ef:c3:c7:
66:69:0e:52:5f:01:93:1d:97:92:c6:92:92:d2:22:
6e:21:ba:32:42:36:66:4b:b9:08:98:16:c4:9f:07:
97:e3:fe:fa:db:8c:05:b9:e0:90:5e:39:4a:70:38:
a4:76:69:37:a6:94:11:59:07:59:a6:25:a8:27:67:
f5:cc:af:7e:78:35:62:8a:1e:4e:5a:09:1d:8e:55:
9d:4e:75:45:8b:4e:8e:9b:64:fc:de:42:c2:e0:c2:
5f:db:d5:9d:34:d8:13:47:e7:e8:51:4b:7f:cb:9f:
4a:bd:71:76:de:00:6e:f7:ae:d5:a7:88:4c:40:c3:
fa:df:53:66:e8:14:ac:bb:21:15:95:38:c6:9a:e3:
89:4d:d2:1d:dc:c1:5b:7f:b5:b3:f8:fc:51:c4:c4:
5f:4d:87:e7:71:5f:1c:eb:18:89:81:47:a9:26:2f:
97:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:50:55:96:96:C9:7A:2C:3F:8E:1A:99:8F:FB:88:0B:1E:6B:C3:81
X509v3 Authority Key Identifier:
keyid:60:BF:F9:47:04:E4:A4:75:37:4E:17:0C:BE:17:36:5F:A8:9F:E0:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YL_5RwTkpHU3ThcMvhc2X6if4Hs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/672fdd-cc7c-4449-9f55-023995906c46/1/XlBVlpbJeiw_jhqZj_uICx5rw4E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/672fdd-cc7c-4449-9f55-023995906c46/1/YL_5RwTkpHU3ThcMvhc2X6if4Hs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.108.232.0/21
185.225.126.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:3d:d8:c0:17:c5:7b:57:2c:a3:43:5d:e1:7c:51:62:3f:12:
57:7c:fa:92:0c:2f:f8:a1:a4:95:f9:a3:2c:ea:20:a1:b4:ee:
67:78:d8:c9:51:f4:ef:3f:b5:42:fb:0d:e7:13:c0:59:1c:81:
77:4c:10:b6:52:6a:84:b7:42:e8:57:4d:48:b0:33:f7:f3:34:
e6:4e:ce:d8:7b:96:b2:ca:41:1a:6e:30:11:75:89:a3:00:42:
56:67:75:91:89:39:41:8a:3c:03:f3:9b:a2:86:aa:c4:7b:ca:
ed:df:ba:e3:2b:dd:77:b1:6d:bc:f0:76:ac:dc:7b:8a:19:d0:
fb:45:81:66:36:e4:a1:83:15:a1:e2:23:14:f6:90:a5:09:80:
85:83:89:86:55:ef:a2:48:aa:01:ea:54:19:e0:5a:3a:98:9d:
2f:d9:98:4e:90:41:ca:dc:bd:d1:53:a0:d5:29:c4:36:25:20:
e4:85:02:83:9d:a6:99:97:9d:fe:cb:8f:59:fd:9c:e7:95:1a:
57:e9:4e:37:4c:5f:ee:5c:6d:98:38:96:4f:96:da:f3:da:bc:
83:fc:c2:1d:59:36:dc:34:88:13:65:a6:98:d6:57:4f:3f:6e:
ff:b0:d5:6c:02:8b:46:3a:c4:57:8a:27:de:29:12:cb:3d:d1:
b1:33:68:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 00:11:43 2026 by rpki-client